Hi,

I have now got VPN working to a remote site, but need to have this routed selectively based on a fixed source device (e.g. NAS).

I.e., only say the device associated with 192.168.1.10, and the rest go via the standard WAN1.

In Load Balance/Route-Policy, I configured the routing for the source IP to any Destination via the VPN. I then enabled it.

Unfortunately, every IP in the 192.168.1.0 subnet is being routed through the VPN.

Do I need to set up an additional Policy for everything else to route via the WAN and then simply place the VPN policy higher up?

Jon

Yes! You nailed it. You'll also need a corresponding rule at the other end to route back again.

Thanks @gbrown100.